CloudBees Compliance v1.47.1

Released: April 29, 2025

Upgrade notes

Perform the following steps when upgrading your installation to the latest release:

Terraform

Apply the following infra modules:

  • kms-infra

    • Adds a KMS key for external credential encryption.

  • iam-infra

    • Updates the cbc-${ENV}-pol-pod-serviceaccounts IAM policy to include access to the KMS key for external credential encryption.

Helm

  • Add the KMS key for external credential encryption to global.aws.external_creds_encryption_key_id in values-<env>.yaml:

        external_creds_encryption_key_id: "alias/cbc-${ENV}-kms-key-external-creds-encryption"
    ▼

  • Add the following to values-<env>.yaml to enable ui-cron-service.

    ############################################################################################################
# ui-cron-service
############################################################################################################

    uiCronService:
      enabled: true
      name: "ui-cron-service"
      imageTag: "imbrium/ui-cron-service:cbc-release-1.47.1"
      imagePullPolicy: Always
      replicas: 1

      strategy:
        type: RollingUpdate
        rollingUpdate:
          maxSurge: 1
          maxUnavailable: 0

      autoscaling:
        enabled: false
        minReplicas: 2
        maxReplicas: 4
        targetCPUUtilizationPercentage: 80

      resources:
        limits:
          memory: 512Mi
        requests:
          cpu: 30m
          memory: 512Mi

      emptyDir:
        sizeLimit: 10Gi

      service:
        type: NodePort
        name: http-service
        port: 5001

      sidecar:
        enabled: true
        hosts:
        - "kube-system/kube-dns.kube-system.svc.cluster.local"
        - "./*.amazonaws.com"
        - "./aws.amazon.com"
        - "./*.{{ $.Release.Namespace }}.svc.cluster.local"
        - "./*.beescloud.com"
        - "./*.cloudbees.com"
    ▼